Undoing Security Policy

[Guest]

Have a question about undoing a security policy.

We're in the process of testing a modified hisecweb security template for our web hosting environment. So far during testing, we have experienced no issues. Before I submit this to our change management board, I need to ensure that I can back out of it. We'll be applying the template via Group Policy.

I tried restoring from a complete system backup (just used NTBackUp) but that did not work. I tried using a new DB and ensured that I had selected "clear" and that did not work.

How do you undo a security template? Any help that you can provide would be appreciated.

 

[Guest]

Here's an update. I tried the following:
http://support.microsoft.com/default.aspx?scid=kb;en-us;313222

Still no luck. This did roll back some changes but not everything.

Grrr

 

[Karl Levinson [x y] mvp]

What things weren't rolled back?

You could always restore the system to the original setup:

http://securityadmin.info/faq.htm#grouppolicy

 

[Steven L Umbach]

Using Secedit as described will reset back to default those settings that were
defined at the initial install template. Not all settings in Security Policy are
defined in a default installation. I believe that all user right assignments are
defined but not all the security options for instance. A complete backup using a
ghost type image may be one way to roll back changes. Otherwise you may need to
create a custom "rollback" template to change the settings that were not changed back
in KB31322. You can start with one of the predefined templates to create your custom
template if need be and save it to a different name. --- Steve